Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/666d2b12-3e4d-3e9a-9e73-88791a6a98c9.roa
File: 666d2b12-3e4d-3e9a-9e73-88791a6a98c9.roa (raw, json)
Hash identifier: vKVZmyBf9ra5n2UpVqepTLrTcX9db/+EBClrvRRH8Zg=
Subject key identifier: AE:47:CD:4F:52:7A:8A:6A:E0:78:A0:59:91:A7:50:D4:2D:2E:4C:E9
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584780266A6FD743F643CEDC4600
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/666d2b12-3e4d-3e9a-9e73-88791a6a98c9.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:2220::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:6a:6f:d7:43:f6:43:ce:dc:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=d173f4f8-076e-4b12-b48a-053691f6ebfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0e:22:87:7a:8f:67:81:fd:6d:bd:4a:36:f0:
ee:48:f9:e2:a0:d0:13:20:94:b8:63:cb:04:11:50:
52:58:5f:18:af:41:39:28:c7:9c:88:a5:e7:28:0c:
d1:47:95:12:53:a5:a2:54:f8:3e:0f:3c:3a:8f:7b:
22:cc:65:e6:fb:f6:47:a9:cb:f9:a9:bd:f0:eb:ce:
47:8c:42:92:da:a0:1b:5b:10:40:f5:5f:5a:ba:0d:
03:29:78:13:9b:9c:97:b6:03:2f:b6:16:ec:d3:d5:
41:5d:5f:f4:85:f2:50:46:02:5c:fd:4d:dd:72:dc:
fe:ab:b0:84:43:89:34:6e:05:dc:fe:b6:76:62:4d:
07:ec:91:48:b4:90:e8:5a:e8:72:5b:92:09:6b:46:
5b:0b:17:f9:82:47:0d:07:78:9a:55:6b:0f:46:42:
57:d1:27:3f:8f:ec:15:7c:04:a4:27:ee:41:07:5e:
d0:78:20:9e:23:db:2a:05:4c:81:0a:e3:80:09:4e:
91:93:1d:60:bb:9a:9c:5f:ae:44:b7:8e:16:c6:f2:
f6:b6:6e:5d:4f:7b:c7:4c:83:fa:71:53:a0:43:7b:
93:f3:90:85:6c:6d:63:8c:ea:fd:31:d0:5c:12:2f:
9b:1a:58:7a:dd:5d:a3:95:b8:25:7b:ba:ae:79:f3:
90:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:47:CD:4F:52:7A:8A:6A:E0:78:A0:59:91:A7:50:D4:2D:2E:4C:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/666d2b12-3e4d-3e9a-9e73-88791a6a98c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:2220::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:60:0e:b1:59:8d:6d:ac:ae:0d:ad:d0:e2:67:8e:50:74:53:
58:fe:d6:c7:c5:88:c9:91:c3:e6:50:a3:8a:ca:29:e3:2b:96:
0d:02:2f:28:a9:07:63:87:1f:2e:7e:4a:0e:90:dd:ec:b6:ca:
7a:17:c5:19:44:1b:23:ff:5c:ef:05:45:d0:ee:0e:33:ea:b9:
32:43:26:2a:55:e6:b6:f0:61:19:48:1f:57:81:87:96:7d:b1:
88:38:db:31:b3:7d:79:7d:df:7c:8d:52:da:62:38:43:67:10:
92:51:d3:c5:5c:fe:f3:2c:f2:5a:44:d1:86:c3:6e:4d:94:7c:
a6:dd:ed:85:35:36:45:10:ea:56:5e:20:4b:41:a8:ab:f2:60:
db:7f:e4:78:b7:21:b0:96:58:eb:dc:0e:5d:f0:eb:04:13:a3:
c4:f3:47:d4:76:38:63:f5:77:30:06:80:22:58:b5:92:22:05:
e7:d1:32:26:d9:b7:5f:8d:86:45:3a:5f:f5:cb:26:57:8d:33:
bc:a9:f2:f4:cf:64:ea:0d:5e:ae:5e:f9:6a:9b:e7:d0:d0:cd:
40:e2:09:5f:03:5b:d6:26:9b:30:5d:55:44:7c:86:cc:0d:50:
91:3e:68:3a:d1:7f:68:a9:22:eb:44:c2:7f:4d:1c:f2:9f:75:
0c:ec:3a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:42 2025 by rpki-client